Did you try adding:
nfs4: mode = special
vfs objects = zfsacl
To the shares in smb.conf? While we haven't done extensive work on
S10, it appears to work well enough for our (limited) purposes (along
with setting the acl properties to passthrough on the fs).
On Fri, Feb 26, 2010 at 10:23 AM, Paul B. Henson <hen...@acm.org> wrote:
> On Fri, 26 Feb 2010, Darren J Moffat wrote:
>
>> Anyone sharing files over CIFS backed by ZFS is using ACLs, particularly
>> when there are only Windows clients. There are large number and some
>> very significant in size deployments.
>
> If you're running the opensolaris in-kernel CIFS server, you avoid the
> POSIX compatibility layer and zfs does actually work in a pure ACL fashion.
> OTOH, under Solaris 10, I was unable to find a samba configuration that
> didn't result in some files being hit by a chmod and losing their ACL.
>
>> I doubt it is something people tend to talk about or publish blogs etc
>> on. That is probably the main reason you can't "find" them.
>
> It's not like I'm typing "People who use ZFS ACL's" into google and nothing
> pops up, I'm inquiring in various forums generally populated by Solaris
> using people, in which typically a "Hey, who uses foo?" post finds a fair
> number of respondents. Given the dearth of responses, I can only conclude
> their use is not very widespread. The most frequent response so far has
> been along the lines of "ACL's suck. I wish they weren't there" 8-/.
>
> So far it's been quite a struggle to deploy ACL's on an enterprise central
> file services platform with access via multiple protocols and have them
> actually be functional and reliable. I can see why the average consumer
> might give up.
>
>
> --
> Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/
> Operating Systems and Network Analyst | hen...@csupomona.edu
> California State Polytechnic University | Pomona CA 91768
> _______________________________________________
> security-discuss mailing list
> security-disc...@opensolaris.org
>
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
